The vulnerability CVE-2025-39371 is a Cross-Site Request Forgery (CSRF) issue in the Sanjeev Mohindra Author Box Plugin With Different Description, versions up to 1.3.5. CSRF vulnerabilities allow attackers to induce authenticated users to perform unwanted actions without their consent. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and low integrity impact. There is no vendor advisory or patch information available at this time. The vulnerability is published and recognized by Patchstack and CISA enrichment is noted.

The impact is limited to low integrity compromise due to CSRF, which could allow an attacker to cause an authenticated user to perform unintended actions within the plugin. There is no confidentiality or availability impact reported. No known exploits have been observed in the wild, reducing immediate risk. The medium severity rating reflects the potential for misuse but limited scope of impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround is provided, users should monitor for updates from the vendor. Until a fix is available, consider restricting access to the plugin or implementing CSRF protections at the application level if possible.